FixOnline Safety and Scams

Fake virus pop-up: what to do

A loud warning says your device is infected and gives a number to ring. Here is how to close it safely, clean up afterwards and stop it coming back.

  • Updated
  • 8 min
  • Beginner
Applies to
  • Any device

Rate this guide

A flashing red page, a siren or a message saying "Virus detected" has appeared on your screen, and it wants you to ring a number. Follow these steps to close it safely, check your device and stop it returning. It works on Windows, Mac, Android and iPhone.

Before you start

You do not need to install anything or phone anyone. Almost every fake alert is a web page or a browser notification, not a real virus on your device. A web page cannot scan your computer. The scare is the whole trick.

The one rule

Never call a number shown in a pop-up. The Federal Trade Commission (FTC), a US government agency, says real security warnings never ask you to call a phone number. Microsoft says its own error and warning messages never include one.

Closing a fake virus alert, in orderA top-to-bottom flow chart with 6 boxes. Work through them in order and stop when the problem is fixed. The full text follows the picture.Closing a fake virus alert, inorderNo1Do not click anything inthe alert2Press Esc to leave fullscreen3Close the tab or window4Is the alert still there?Yes: Force the browser to quit5Force the browser to quitStill stuck? Hold the powerbutton to turn off thedevice.
Stop as soon as the alert is gone.
Text version of this diagram
  1. Step 1: Do not click anything in the alert
  2. Step 2: Press Esc to leave full screen
  3. Step 3: Close the tab or window
  4. Question 4: Is the alert still there? If yes: Force the browser to quit. If no, go on to the next item.
  5. Step 5: Force the browser to quit
  6. If nothing worked: Still stuck? Hold the power button to turn off the device.

Close the alert safely

Windows

  1. Do not click inside the alert. That includes buttons labeled OK, Cancel or Close, because they may be part of the page.
  2. Press Esc to leave full-screen mode. In Microsoft Edge, the scareware blocker (a built-in feature that spots fake full-screen alerts) can do this for you and show its own warning with a Close page option.
  3. Press Alt + F4 to close the browser window. The page should disappear.
  4. If the window stays, press Ctrl + Shift + Esc to open Task Manager, select the browser, then select End task.
  5. If Task Manager will not open, restart the computer. Scam pages sometimes try to block Task Manager. If the keyboard does not respond at all, hold the power button until the PC turns off, then start it again. You may lose unsaved work, which is better than staying connected to the page.

Mac

  1. Press Esc to leave full screen, then press Command + Q to quit the browser.
  2. If it does not quit, press Option + Command + Esc, select the browser in the list, then select Force Quit.

Android phone or tablet and iPhone or iPad

  1. Close the tab if you can see the tab button. Otherwise open the app switcher and swipe the browser away.
  2. If the alert is a notification, do not tap it. Swipe it away, or open its options and turn off notifications for that site or app. Menu names differ by phone and version.

Reopen the browser carefully

  1. Open the browser again. If it offers to Restore or reopen your previous pages, decline. Restoring would load the fake page again.
  2. If the page opens by itself anyway, close it again and go on to the clean-up below.

Clean up afterwards

Spend a few minutes on this even if the alert is gone. It removes the reason it appeared.

1. Block the site's notifications

Some fake alerts arrive as notifications from a site you once clicked Allow on. Menu names change between versions, so use the settings search box if you cannot find these.

  • Google Chrome on a computer: More then Settings then Privacy and security then Site Settings then Notifications. Next to Not allowed to send notifications, select Add, type the site's address, then select Add. Chrome also lists sites under Allowed to send notifications.
  • Microsoft Edge: Settings then Cookies and site permissions then Notifications.
  • Safari on a Mac: Safari then Settings then Websites then Notifications. Set unfamiliar sites to Deny.

Block or remove any site you do not recognize.

2. Look for extensions you did not choose

Open your browser's extensions page from its menu. Remove any extension you do not remember adding.

3. Run a scan

On Windows, open Windows Security from the Start menu, select Virus & threat protection, then run a scan. The guide how to run a malware scan has every step.

4. Change passwords only if you typed one

If you typed a password or card number into the fake page, change that password at the real website and see strong passwords and two-step verification. Contact your card company using the details on your card.

After the alert is closed4 numbered steps, one under the other. The full text follows the picture.After the alert is closed1BlockStop notifications from the site2CheckRemove extensions you donot know3ScanRun Windows Security or yoursecurity software4SecureChange any password youtyped
Most people only need the first two.
Text version of this diagram
  1. Block: Stop notifications from the site
  2. Check: Remove extensions you do not know
  3. Scan: Run Windows Security or your security software
  4. Secure: Change any password you typed

If you already called or installed something

If someone has control of your device

If you rang the number and let a stranger see or control your screen, or installed a program they told you to, disconnect from the internet now and follow what to do if you gave someone remote access. If you paid, contact your bank or card company straight away.

If you only saw the pop-up and did nothing it asked, you are fine. The FTC advises updating your security software and running a scan if you think the computer has a problem.

Report it and prevent it

  • Keep your browser and system updated.
  • Download programs only from the maker's official site, as in safe downloads and fake driver sites.
  • To report a scam in the United States, use ReportFraud.ftc.gov or microsoft.com/reportascam. Outside the US, use your own government's consumer-protection site.

For a wider look at how these scams work, read how to spot tech support scams.

Frequently asked questions

Could my device really have a virus?

It is possible but unlikely from a pop-up alone. A browser page cannot scan your files. If you want to be sure, run the scan built into your system or security software you already trust.

The alert says it is from Microsoft or Apple. Does that make it real?

No. Anyone can copy a logo. Microsoft says it never sends unsolicited technical support, and its error messages never include a phone number.

The pop-up keeps coming back every time I open the browser. Why?

Usually it is an allowed notification, a restored tab or an unwanted extension. Work through the clean-up steps above. If it still returns, run a full scan.

Should I reset my computer?

Not for a pop-up alone. Resetting erases data, so keep it for cases where a scan cannot clear a real infection and you have a backup.

Was this guide helpful?

Choose from 1 star (not helpful) to 5 stars (very helpful)

Rating this guide needs JavaScript. You can send feedback on the contact page instead.

Official resources used

Pages consulted while preparing this guide. Check them for the latest details.

Need more help?

If this guide did not solve your problem, send us a message and tell us what you tried.

Contact us

Beware of fake support

Real support never asks you to call an unfamiliar number, pay with gift cards or let a stranger control your computer.

How to find real support and avoid fake phone numbers